Full List

Search

Search Results (Ransomware)

• Fusion Superplex March 2, 2026 • [ ransomware, server infrastructure, internal operations ] Fusion Superplex said a ransomware attack temporarily affected server infrastructure, internal operations, its IMAX system, and online ticketing.
• Athénée Royal d'Izel April 9, 2026 • [ ransomware, encryption, service disruption ] The local server of Athne Royal d'Izel was encrypted during a ransomware attack on the morning of April 9, 2026, affecting the online school platform for meal payments and attendance; quick isolation prevented personal data theft and restoration from backups was underway.
• Mile Bluff Medical Center April 21, 2026 • [ ransomware, data encryption, system disruption ] Mile Bluff Medical Center experienced system disruptions after a security event that encrypted data, affecting phone and computer systems; clinical teams operated under downtime procedures while the organization investigated and engaged third-party partners.
• Town of Apex June 23, 2024 • [ ransomware, unauthorized access, data breach ] The Town of Apex experienced a ransomware event in which unauthorized actors accessed town systems from June 23 to July 2, 2024, uploaded town data to a cloud storage provider, and potentially affected personal information of about 22,000 residents; Apex later recovered the data through court action.
• Guesty April 15, 2026 • [ ransomware, extortion, data theft ] Vect claimed it stole 700GB of Guesty data and was negotiating with the company after a ransomware-related extortion listing.
• Alamo Heights Independent School District March 23, 2026 • [ ransomware, network attack ] Alamo Heights ISD suffered a ransomware-related network attack that left the district without Internet access for nearly a week.
• Undisclosed United States organization April 7, 2026 • [ ransomware, cybercrime, data exfiltration ] Microsoft reported that Storm-1175, a financially motivated cybercrime actor linked to Medusa ransomware, heavily impacted organizations in Australia, the United Kingdom, and the United States by exploiting vulnerable web-facing systems, exfiltrating data, and deploying ransomware. This row represents the undisclosed United States victim component of the country-level coding approach.
• Undisclosed United Kingdom organization April 7, 2026 • [ ransomware, data exfiltration, cybercrime ] Microsoft reported that Storm-1175, a financially motivated cybercrime actor linked to Medusa ransomware, heavily impacted organizations in Australia, the United Kingdom, and the United States by exploiting vulnerable web-facing systems, exfiltrating data, and deploying ransomware. This row represents the undisclosed United Kingdom victim component of the country-level coding approach.
• Undisclosed Australian organization April 7, 2026 • [ ransomware, Medusa ransomware, data exfiltration ] Microsoft reported that Storm-1175, a financially motivated cybercrime actor linked to Medusa ransomware, heavily impacted organizations in Australia, the United Kingdom, and the United States by exploiting vulnerable web-facing systems, exfiltrating data, and deploying ransomware. This row represents the undisclosed Australian victim component of the country-level coding approach.
• Świętokrzyskie Rehabilitation Center March 31, 2026 • [ ransomware, encryption, personal data ] witokrzyskie Rehabilitation Center reported a ransomware attack that encrypted personal-data files and may have exposed data.
• Bonifraterskie Medical Center March 13, 2026 • [ ransomware, data leak, personal data ] Bonifraterskie Medical Center reported a ransomware attack that encrypted part of its server infrastructure and likely exposed personal data.
• Autovista April 11, 2026 • [ ransomware, service disruption, containment ] Autovista reported a ransomware incident identified on April 11, 2026 that affected certain systems in Europe and Australia and caused service disruption for customers. The company implemented containment measures, worked with external forensic experts to validate systems before restoration, and later reported many products and services were partially or fully restored.
• Spring Lake Park School District April 12, 2026 • [ ransomware, system shutdown, cyberattack ] Spring Lake Park Schools discovered on April 12, 2026 that an outside actor had accessed some district systems in a suspected ransomware incident; the district shut down systems defensively to prevent further access, causing class, childcare, community education, and after-school activity cancellations while recovery proceeded.
• Rx Management April 8, 2026 • [ ransomware, data leak, healthcare ] INC Ransom listed Australian pharmacy management firm Rx Management on its leak site on April 8, 2026 and threatened to publish more than 180 GB of allegedly stolen data; the data types and full extent were not publicly verified.
• ChipSoft April 7, 2026 • [ ransomware, healthcare, data breach ] Embargo ransomware hit ChipSoft on April 7, 2026, disrupting its website and digital healthcare services, causing hospitals to disconnect or take ChipSoft-connected systems offline, and stealing medical personal data from several Dutch healthcare institutions; ChipSoft later said the stolen data had been destroyed.
• Undisclosed Mexican Bank #2 February 1, 2026 • [ ransomware, Qilin, electronic channels ] Banco de Mxico reported that an undisclosed bank suffered a February 2026 ransomware incident involving Qilin that affected electronic channels and electronic transfer services; no customer financial impact was reported and the institutions financial impact remained pending.
• Undisclosed Mexican Bank #1 January 1, 2026 • [ ransomware, LockBit, electronic transfer services ] Banco de Mxico reported that an undisclosed bank suffered a January 2026 ransomware incident involving LockBit that affected electronic transfer services; no customer financial impact was reported and the institutions financial impact remained pending.
• City of Minot Water Treatment Plant March 14, 2026 • [ ransomware, critical infrastructure, utilities ] Minot, North Dakota officials confirmed a ransomware event impacted a server at the citys water treatment plant on March 14, 2026. The city said the water treatment plant and broader water system remained operational and safe, with no interruption to water service reported.
• Sandhills Medical May 8, 2025 • [ ransomware, unauthorized access, patient information ] Sandhills Medical disclosed that a ransomware attack led to unauthorized access to patient information.
• Kent District Library April 24, 2026 • [ ransomware, cyberattack, service disruption ] Kent District Library closed all branches after a ransomware attack disrupted computer systems and network-dependent services.